LAB - vESX

See this diagram:

Describle: Using 1 physical to do this
1) pESX : physical server install ESXi 5.1
2) Router : is virtual machine in pESX has 2 NIC, use router simulator named VYATTA, 1 connect to pESX-vswitch0 (named external NIC) and another connect to pESX-vswitch1 (named internal NIC). External NIC has public IP address and internal NIC configure 3 sub-interface eth1.100/eth1.300/eth1.401 with VLAN ID 100/300 and 401
3) vESX is virtual machine in pESX has only one NIC, this NIC is connected to pESX-switch1 in port group named TRUNKING.
4) pESX-vswitch1 configure with some port group, 1 PG named TRUNKING for connection vESX and router, and other pg for specific vlan access. See pESX vswitch config below:

(dont worry about the IP 172, that just demo, just understand the Vyatta NIC here has external IP).

See vESX vswitch below

VM1 and VM2 in vESX should be successful access to outside network with this Vyatta configuration. It's no need to configure trunking in vESX-vswitch1(its give u the same result), just configure VLAN ID for port group where VMs want to go through (and vmkernel port for management network also shoud be assigned in relevant VLAN as well or you can not connect to this management IP from outside).